If you are a Small Business customer, find additional troubleshooting and learning resources at the Support for Small Business site.

The Event Viewer application log displays many of the following messages in short intervals:

Event Type: Error
Event Source: Perflib
Event Category: None
Event ID: 1008
Description:
The Open Procedure for service "Nbf" in DLL "C:\WINNT\system32\Perfctrs.dll" failed.
Performance data for this service will not be available. Status code returned is DWORD 0.

This issue may occur after you disable the NetBEUI (NetBIOS Enhanced User Interface) protocol.
In the message that is referenced in the "Symptoms" section, PerfLib is a performance counter library. The Perfctrs DLL monitors some network counters. The counter for the NetBIOS Frames Protocol (NBF) service, the NetBEUI network protocol, causes the error.

When you first create a performance query, Perflib checks the availability of all counters that are listed in the registry. If a counter is not available, the application log displays an event message. This event message occurs when one or more of the following conditions are true:

The NetBEUI protocol does not bind to the network adapter, because either the adapter or the driver is defective, and its extensible performance monitor counters are enumerated.

NetBEUI is bound to a network adapter that is not connected to the local area network (LAN).

NetBEUI is installed, but it is disabled on the network adapter card.

This issue may occur if your computer loads a performance monitoring-based program at startup.

Make sure that there are no nonpresent, ghosted, or hidden network adapters in your computer.
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

If the Open function for an extension does not return ERROR_SUCCESS, Perflib posts the status code in the data field of the event. In the example that is referenced in the "Symptoms" section of this article, Perflib posts "Data Words: 00000002." The status code helps the author of the extension to determine why the Open function failed.

Note The event may be logged even if NetBEUI is disabled on the network adapter card.

Prevent Perflib from checking the NBF counters.

Note The following information applies to 1008 events in general, not only to the NBF service.

To prevent the performance counter library (Perflib) from checking counters, you can disable the Extensible Performance Counters library or remove it. Use one of the following methods to do this:

To use the Extensible Counter tool (ExCtrlLst.exe) to disable the Perfctrs.dll performance counters, follow these steps:

Start the Exctrlst.exe tool. This tool is in the Microsoft Windows 2000 Resource Kit.

Select the DLL (Perfctrs.dll) that did not open in the Extensible Performance Counters list box.

Click to clear the Performance Counters Enabled check box.

Restart the computer.

This procedure does not resolve this issue, but it may prevent future error messages.
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

To disable the performance counters by modifying a specific registry entry, follow these steps:

Note You can set this value programmatically through your performance data collection program, or you can use Registry Editor. If you use Registry Editor, information from the counters will not be available unless you change the subkey value to 0 or delete the subkey.
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

Locate and then click the following service_name\Performance subkey in the registry:

\HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NBF\Performance

Click Add Value on the Edit menu, and then add the following values:

Collapse this tableExpand this table

Value name:

Disable Performance Counters

Data type:

REG_DWORD

Radix:

Decimal

Value data:

1

Quit Registry Editor.

Restart the computer.

Note Counters will not load, and you will not be able to collect NetBEUI and TCPIP performance data.

To remove the performance counters by modifying a specific registry entry, follow these steps:

Note To prevent Event 1008 errors, you can generally export the Performance registry subkey and then remove the Performance registry branch of the service_name service that is mentioned in the Event 1008 error text, where Nbf is the service_name in the event message that is referenced in the "Symptoms" section of this article.

Start Registry Editor.

Locate and then click the following service_name\Performance key in the registry:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Nbf\Performance

Export the performance key, and then delete it from the registry.

Note If you do not use Performance Monitor or any other performance monitor program to track NetBEUI performance, remove the Performance registry branch for the NBF service (NetBEUI protocol).